awslabs mysql-mcp-server Read-Only Bypass Vulnerability (CVE-2026-85788)

The awslabs mysql-mcp-server (versions ≤1.0.21) has a security issue where read-only enforcement can be bypassed using SQL inline comments, potentially allowing restricted queries to execute. User action is required: update to a patched version immediately if you're running affected versions. Remember that read-only mode is a best-effort safeguard—proper database permissions remain your primary defense. AWS services themselves aren't impacted, but your self-hosted setup needs attention.